[CODE]

2009-09-23,23:17:49

System Repair Engineer 2.8.1.1279
Smallfrogs (http://www.KZTechs.com)

Windows XP Professional Service Pack 3 (Build 2600) - 管理权限用户 - 完整功能

以下内容被选中：
    所有的启动项目（包括注册表、启动文件夹、服务等）
    浏览器加载项
    正在运行的进程（包括进程模块信息）
    文件关联
    Winsock 提供者
    Autorun.inf
    HOSTS 文件
    进程特权扫描
    计划任务
    Windows 安全更新检查
    API HOOK
    隐藏进程


启动项目
注册表
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
    <PPLiveVA><C:\Program Files\PPLiveVA\PPLiveVA.exe /LoadModule PPVA.DLL /M REAL /S 0 /T 0>  [(Verified)Synacast Corp.]
    <ctfmon.exe><C:\windows\system32\ctfmon.exe>  [(Verified)Microsoft Windows Component Publisher]
    <PPS Accelerator><C:\Program Files\PPStream\ppsap.exe>  [(Verified)SHANGHAI ZHONGYUAN NETWORKS LIMITED]
    <PPAP><C:\Documents and Settings\All Users\Application Data\PPLiveVA\Application\PPAP.exe>  [(Verified)Synacast Corp.]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
    <360Safetray><"C:\Program Files\360safe\safemon\360tray.exe" /start>  [(Verified)Qizhi Software (beijing) Co. Ltd]
    <NvCplDaemon><RUNDLL32.EXE C:\windows\system32\NvCpl.dll,NvStartup>  [(Verified)Microsoft Windows Hardware Compatibility Publisher]
    <360Safebox><"C:\Program Files\360safebox\safeboxTray.exe" /r>  [(Verified)Qizhi Software (beijing) Co. Ltd]
    <RavTray><"C:\Program Files\Rising\Rav\RsTray.exe" -system>  [(Verified)Beijing Rising Information Technology Corporation Limited]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
    <shell><Explorer.exe>  [(Verified)Microsoft Windows Component Publisher]
    <Userinit><C:\WINDOWS\system32\userinit.exe,>  [(Verified)Microsoft Windows Component Publisher]
    <UIHost><%SystemRoot%\system32\logonui.exe>  [(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
    <{AEB6717E-7E19-11d0-97EE-00C04FD91972}><shell32.dll>  [(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
    <PostBootReminder><%SystemRoot%\system32\SHELL32.dll>  [(Verified)Microsoft Windows Component Publisher]
    <CDBurn><%SystemRoot%\system32\SHELL32.dll>  [(Verified)Microsoft Windows Component Publisher]
    <WebCheck><C:\WINDOWS\system32\webcheck.dll>  [(Verified)Microsoft Windows Component Publisher]
    <SysTray><C:\WINDOWS\system32\stobject.dll>  [(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\crypt32chain]
    <WinlogonNotify: crypt32chain><crypt32.dll>  [(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\cryptnet]
    <WinlogonNotify: cryptnet><cryptnet.dll>  [(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\cscdll]
    <WinlogonNotify: cscdll><cscdll.dll>  [(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\dimsntfy]
    <WinlogonNotify: dimsntfy><%SystemRoot%\System32\dimsntfy.dll>  [(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\ScCertProp]
    <WinlogonNotify: ScCertProp><wlnotify.dll>  [(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\Schedule]
    <WinlogonNotify: Schedule><wlnotify.dll>  [(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\sclgntfy]
    <WinlogonNotify: sclgntfy><sclgntfy.dll>  [(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\SensLogn]
    <WinlogonNotify: SensLogn><WlNotify.dll>  [(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\termsrv]
    <WinlogonNotify: termsrv><wlnotify.dll>  [(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\wlballoon]
    <WinlogonNotify: wlballoon><wlnotify.dll>  [(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler]
    <{438755C2-A8BA-11D1-B96B-00A0C90312E1}><%SystemRoot%\system32\browseui.dll>  [(Verified)Microsoft Windows Component Publisher]
    <{8C7461EF-2B13-11d2-BE35-3078302C2030}><%SystemRoot%\system32\browseui.dll>  [(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\<{12d0ed0d-0ee0-4f90-8827-78cefb8f4988}]
    <IE7 Uninstall Stub><C:\WINDOWS\system32\ieudinit.exe>  [(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\>{22d6f312-b0f6-11d0-94ab-0080c74c7e95}]
    <Microsoft Windows Media Player><C:\WINDOWS\inf\unregmp2.exe /ShowWMP>  [(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\>{26923b43-4d38-484f-9b9e-de460746276c}]
    <Internet Explorer><%systemroot%\system32\shmgrate.exe OCInstallUserConfigIE>  [File is missing]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\>{60B49E34-C7CC-11D0-8953-00A0C90347FF}]
    <Browser Customizations><RunDLL32 IEDKCS32.DLL,BrandIE4 SIGNUP>  [(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\>{60B49E34-C7CC-11D0-8953-00A0C90347FF}MICROS]
    <浏览器自定义组件><RunDLL32 IEDKCS32.DLL,BrandIE4 SIGNUP>  [(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\>{881dd1c5-3dcf-431b-b061-f3f88e8be88a}]
    <Outlook Express><%systemroot%\system32\shmgrate.exe OCInstallUserConfigOE>  [File is missing]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{2C7339CF-2B09-4501-B3F3-F3508C9228ED}]
    <Themes Setup><%SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll>  [File is missing]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{44BBA840-CC51-11CF-AAFA-00AA00B6015C}]
    <Microsoft Outlook Express 6><"%ProgramFiles%\Outlook Express\setup50.exe" /APP:OE /CALLER:WINNT /user /install>  [File is missing]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{44BBA842-CC51-11CF-AAFA-00AA00B6015B}]
    <NetMeeting 3.01><rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\msnetmtg.inf,NetMtg.Install.PerUser.NT>  [(Verified)Microsoft Windows Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{5945c046-1e7d-11d1-bc44-00c04fd912be}]
    <Windows Messenger 4.7><rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\msmsgs.inf,BLC.QuietInstall.PerUser>  [(Verified)Microsoft Windows Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{6BF52A52-394A-11d3-B153-00C04F79FAA6}]
    <Microsoft Windows Media Player><rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\wmp10.inf,PerUserStub>  [(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{7790769C-0471-11d2-AF11-00C04FA35D02}]
    <通讯簿 6><"%ProgramFiles%\Outlook Express\setup50.exe" /APP:WAB /CALLER:WINNT /user /install>  [File is missing]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{89820200-ECBD-11cf-8B85-00AA005B4340}]
    <Windows 桌面更新><regsvr32.exe /s /n /i:U shell32.dll>  [(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{89820200-ECBD-11cf-8B85-00AA005B4383}]
    <Internet Explorer><C:\WINDOWS\system32\ie4uinit.exe -BaseSettings>  [(Verified)Microsoft Windows Component Publisher]

==================================
启动文件夹
N/A

==================================
服务
[Bluetooth Service / btwdins][Running/Auto Start]
  <C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe><Broadcom Corporation.>
[Google Software Updater / gusvc][Stopped/Manual Start]
  <"C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe"><Google>
[Human Interface Device Access / HidServ][Stopped/Disabled]
  <C:\windows\System32\svchost.exe -k netsvcs-->%SystemRoot%\System32\hidserv.dll><N/A>
[NVIDIA Display Driver Service / NVSvc][Running/Auto Start]
  <C:\windows\system32\nvsvc32.exe><NVIDIA Corporation>
[Rav Process Communication Center / RavCCenter][Stopped/Auto Start]
  <C:\Program Files\Rising\Rav\CCENTER.EXE><Beijing Rising Information Technology Co., Ltd.>
[Rising RavTask Manager / RavTask][Running/Auto Start]
  <"C:\Program Files\Rising\Rav\RavTask.exe" RavTask><Beijing Rising Information Technology Co., Ltd.>
[Remote Packet Capture Protocol v.0 (experimental) / rpcapd][Stopped/Manual Start]
  <"C:\Program Files\WinPcap\rpcapd.exe" -d -f "C:\Program Files\WinPcap\rpcapd.ini"><CACE Technologies>
[Rising RealTime Monitor / RsRavMon][Stopped/Auto Start]
  <C:\Program Files\Rising\Rav\RavMonD.exe><Beijing Rising Information Technology Co., Ltd.>
[Rising Scan Service / RsScanSrv][Stopped/Auto Start]
  <C:\Program Files\Rising\Rav\ScanFrm.exe><Beijing Rising Information Technology Co., Ltd.>

==================================
驱动程序
[360SelfProtection / 360SelfProtection][Running/System Start]
  <system32\drivers\360SelfProtection.sys><360安全中心>
[Intel(r) 82801 Audio Driver Install Service (WDM) / ac97intc][Stopped/Manual Start]
  <system32\drivers\ac97intc.sys><Intel Corporation>
[ADProt / ADProt][Stopped/System Start]
  <\SystemRoot\system32\drivers\ADProt.sys><N/A>
[Agere Systems Soft Modem / AgereSoftModem][Running/Manual Start]
  <system32\DRIVERS\AGRSM.sys><Agere Systems>
[AliIde / AliIde][Running/Boot Start]
  <\SystemRoot\System32\DRIVERS\aliide.sys><Acer Laboratories Inc.>
[AMD K8 Processor Driver / AmdK8][Stopped/Manual Start]
  <System32\DRIVERS\amdk8.sys><Advanced Micro Devices>
[BFSDRV / BFSDRV][Running/System Start]
  <\??\C:\windows\system32\drivers\bfsdrv.sys><360安全中心>
[BREGDRV / BREGDRV][Running/System Start]
  <\??\C:\windows\system32\drivers\bregdrv.sys><360安全中心>
[蓝牙音频设备 / btaudio][Stopped/Manual Start]
  <system32\drivers\btaudio.sys><Broadcom Corporation.>
[蓝牙虚拟通信驱动程序 / BTDriver][Stopped/Manual Start]
  <system32\DRIVERS\btport.sys><Broadcom Corporation.>
[蓝牙总线枚举器 / BTKRNL][Running/Manual Start]
  <system32\DRIVERS\btkrnl.sys><Broadcom Corporation.>
[蓝牙局域网接入服务器 / BTWDNDIS][Stopped/Manual Start]
  <system32\DRIVERS\btwdndis.sys><Broadcom Corporation.>
[蓝牙调制解调器 / btwmodem][Stopped/Manual Start]
  <system32\DRIVERS\btwmodem.sys><Broadcom Corporation.>
[WIDCOMM USB Bluetooth Driver / BTWUSB][Stopped/Manual Start]
  <System32\Drivers\btwusb.sys><Broadcom Corporation.>
[c10007687 / c10007687][Stopped/Boot Start]
  <\SystemRoot\System32\drivers\c10007687.sys><N/A>
[c10210890 / c10210890][Stopped/Boot Start]
  <\SystemRoot\System32\drivers\c10210890.sys><N/A>
[c10306593 / c10306593][Stopped/Boot Start]
  <\SystemRoot\System32\drivers\c10306593.sys><N/A>
[c10339921 / c10339921][Stopped/Boot Start]
  <\SystemRoot\System32\drivers\c10339921.sys><N/A>
[c10484750 / c10484750][Stopped/Boot Start]
  <\SystemRoot\System32\drivers\c10484750.sys><N/A>
[c10541140 / c10541140][Stopped/Boot Start]
  <\SystemRoot\System32\drivers\c10541140.sys><N/A>
[c10609531 / c10609531][Stopped/Boot Start]
  <\SystemRoot\System32\drivers\c10609531.sys><N/A>
[c10683687 / c10683687][Stopped/Boot Start]
  <\SystemRoot\System32\drivers\c10683687.sys><N/A>
[c10706906 / c10706906][Stopped/Boot Start]
  <\SystemRoot\System32\drivers\c10706906.sys><N/A>
[c10831609 / c10831609][Stopped/Boot Start]
  <\SystemRoot\System32\drivers\c10831609.sys><N/A>
[c10858968 / c10858968][Stopped/Boot Start]
  <\SystemRoot\System32\drivers\c10858968.sys><N/A>
[c10876406 / c10876406][Stopped/Boot Start]
  <\SystemRoot\System32\drivers\c10876406.sys><N/A>
[c10885718 / c10885718][Stopped/Boot Start]
  <\SystemRoot\System32\drivers\c10885718.sys><N/A>
[c10901546 / c10901546][Stopped/Boot Start]
  <\SystemRoot\System32\drivers\c10901546.sys><N/A>
[c10914250 / c10914250][Stopped/Boot Start]
  <\SystemRoot\System32\drivers\c10914250.sys><N/A>
[c11146203 / c11146203][Stopped/Boot Start]
  <\SystemRoot\System32\drivers\c11146203.sys><N/A>
[c11162531 / c11162531][Stopped/Boot Start]
  <\SystemRoot\System32\drivers\c11162531.sys><N/A>
[c11212468 / c11212468][Stopped/Boot Start]
  <\SystemRoot\System32\drivers\c11212468.sys><N/A>
[c11264000 / c11264000][Stopped/Boot Start]
  <\SystemRoot\System32\drivers\c11264000.sys><N/A>
[c11274906 / c11274906][Stopped/Boot Start]
  <\SystemRoot\System32\drivers\c11274906.sys><N/A>
[c11274921 / c11274921][Stopped/Boot Start]
  <\SystemRoot\System32\drivers\c11274921.sys><N/A>
[c11293578 / c11293578][Stopped/Boot Start]
  <\SystemRoot\System32\drivers\c11293578.sys><N/A>
[c11403468 / c11403468][Stopped/Boot Start]
  <\SystemRoot\System32\drivers\c11403468.sys><N/A>
[c11679625 / c11679625][Stopped/Boot Start]
  <\SystemRoot\System32\drivers\c11679625.sys><N/A>
[c11775937 / c11775937][Stopped/Boot Start]
  <\SystemRoot\System32\drivers\c11775937.sys><N/A>
[c11824375 / c11824375][Stopped/Boot Start]
  <\SystemRoot\System32\drivers\c11824375.sys><N/A>
[c11835140 / c11835140][Stopped/Boot Start]
  <\SystemRoot\System32\drivers\c11835140.sys><N/A>
[c11935796 / c11935796][Stopped/Boot Start]
  <\SystemRoot\System32\drivers\c11935796.sys><N/A>
[c12220625 / c12220625][Stopped/Boot Start]
  <\SystemRoot\System32\drivers\c12220625.sys><N/A>
[c12270703 / c12270703][Stopped/Boot Start]
  <\SystemRoot\System32\drivers\c12270703.sys><N/A>
[c12383890 / c12383890][Stopped/Boot Start]
  <\SystemRoot\System32\drivers\c12383890.sys><N/A>
[c12557562 / c12557562][Stopped/Boot Start]
  <\SystemRoot\System32\drivers\c12557562.sys><N/A>
[c12569468 / c12569468][Stopped/Boot Start]
  <\SystemRoot\System32\drivers\c12569468.sys><N/A>
[c13243875 / c13243875][Stopped/Boot Start]
  <\SystemRoot\System32\drivers\c13243875.sys><N/A>
[c14068093 / c14068093][Stopped/Boot Start]
  <\SystemRoot\System32\drivers\c14068093.sys><N/A>
[c14169187 / c14169187][Stopped/Boot Start]
  <\SystemRoot\System32\drivers\c14169187.sys><N/A>
[c14179140 / c14179140][Stopped/Boot Start]
  <\SystemRoot\System32\drivers\c14179140.sys><N/A>
[c14900171 / c14900171][Stopped/Boot Start]
  <\SystemRoot\System32\drivers\c14900171.sys><N/A>
[c14940515 / c14940515][Stopped/Boot Start]
  <\SystemRoot\System32\drivers\c14940515.sys><N/A>
[c14949453 / c14949453][Stopped/Boot Start]
  <\SystemRoot\System32\drivers\c14949453.sys><N/A>
[c15041312 / c15041312][Stopped/Boot Start]
  <\SystemRoot\System32\drivers\c15041312.sys><N/A>
[c15158812 / c15158812][Stopped/Boot Start]
  <\SystemRoot\System32\drivers\c15158812.sys><N/A>
[c15166906 / c15166906][Stopped/Boot Start]
  <\SystemRoot\System32\drivers\c15166906.sys><N/A>
[c15250765 / c15250765][Stopped/Boot Start]
  <\SystemRoot\System32\drivers\c15250765.sys><N/A>
[c15485250 / c15485250][Stopped/Boot Start]
  <\SystemRoot\System32\drivers\c15485250.sys><N/A>
[c15552828 / c15552828][Stopped/Boot Start]
  <\SystemRoot\System32\drivers\c15552828.sys><N/A>
[c15618390 / c15618390][Stopped/Boot Start]
  <\SystemRoot\System32\drivers\c15618390.sys><N/A>
[c15934250 / c15934250][Stopped/Boot Start]
  <\SystemRoot\System32\drivers\c15934250.sys><N/A>
[c15948781 / c15948781][Stopped/Boot Start]
  <\SystemRoot\System32\drivers\c15948781.sys><N/A>
[c16194750 / c16194750][Stopped/Boot Start]
  <\SystemRoot\System32\drivers\c16194750.sys><N/A>
[c16454781 / c16454781][Stopped/Boot Start]
  <\SystemRoot\System32\drivers\c16454781.sys><N/A>
[c16472515 / c16472515][Stopped/Boot Start]
  <\SystemRoot\System32\drivers\c16472515.sys><N/A>
[c16604984 / c16604984][Stopped/Boot Start]
  <\SystemRoot\System32\drivers\c16604984.sys><N/A>
[c174293343 / c174293343][Stopped/Boot Start]
  <\SystemRoot\System32\drivers\c174293343.sys><N/A>
[c174548062 / c174548062][Stopped/Boot Start]
  <\SystemRoot\System32\drivers\c174548062.sys><N/A>
[c174564046 / c174564046][Stopped/Boot Start]
  <\SystemRoot\System32\drivers\c174564046.sys><N/A>
[c174567968 / c174567968][Stopped/Boot Start]
  <\SystemRoot\System32\drivers\c174567968.sys><N/A>
[c174568562 / c174568562][Stopped/Boot Start]
  <\SystemRoot\System32\drivers\c174568562.sys><N/A>
[c174651093 / c174651093][Stopped/Boot Start]
  <\SystemRoot\System32\drivers\c174651093.sys><N/A>
[c174732906 / c174732906][Stopped/Boot Start]
  <\SystemRoot\System32\drivers\c174732906.sys><N/A>
[c174736968 / c174736968][Stopped/Boot Start]
  <\SystemRoot\System32\drivers\c174736968.sys><N/A>
[c174762500 / c174762500][Stopped/Boot Start]
  <\SystemRoot\System32\drivers\c174762500.sys><N/A>
[c174770437 / c174770437][Stopped/Boot Start]
  <\SystemRoot\System32\drivers\c174770437.sys><N/A>
[c175687812 / c175687812][Stopped/Boot Start]
  <\SystemRoot\System32\drivers\c175687812.sys><N/A>
[c175720562 / c175720562][Stopped/Boot Start]
  <\SystemRoot\System32\drivers\c175720562.sys><N/A>
[c1764796 / c1764796][Stopped/Boot Start]
  <\SystemRoot\System32\drivers\c1764796.sys><N/A>
[c18493859 / c18493859][Stopped/Boot Start]
  <\SystemRoot\System32\drivers\c18493859.sys><N/A>
[c18559875 / c18559875][Stopped/Boot Start]
  <\SystemRoot\System32\drivers\c18559875.sys><N/A>
[c18576531 / c18576531][Stopped/Boot Start]
  <\SystemRoot\System32\drivers\c18576531.sys><N/A>
[c18588062 / c18588062][Stopped/Boot Start]
  <\SystemRoot\System32\drivers\c18588062.sys><N/A>
[c18651718 / c18651718][Stopped/Boot Start]
  <\SystemRoot\System32\drivers\c18651718.sys><N/A>
[c19590906 / c19590906][Stopped/Boot Start]
  <\SystemRoot\System32\drivers\c19590906.sys><N/A>
[c19618921 / c19618921][Stopped/Boot Start]
  <\SystemRoot\System32\drivers\c19618921.sys><N/A>
[c20554937 / c20554937][Stopped/Boot Start]
  <\SystemRoot\System32\drivers\c20554937.sys><N/A>
[c20586312 / c20586312][Stopped/Boot Start]
  <\SystemRoot\System32\drivers\c20586312.sys><N/A>
[c21058968 / c21058968][Stopped/Boot Start]
  <\SystemRoot\System32\drivers\c21058968.sys><N/A>
[c21095093 / c21095093][Stopped/Boot Start]
  <\SystemRoot\System32\drivers\c21095093.sys><N/A>
[c21483578 / c21483578][Stopped/Boot Start]
  <\SystemRoot\System32\drivers\c21483578.sys><N/A>
[c21662031 / c21662031][Stopped/Boot Start]
  <\SystemRoot\System32\drivers\c21662031.sys><N/A>
[c21960125 / c21960125][Stopped/Boot Start]
  <\SystemRoot\System32\drivers\c21960125.sys><N/A>
[c22049890 / c22049890][Stopped/Boot Start]
  <\SystemRoot\System32\drivers\c22049890.sys><N/A>
[c22081562 / c22081562][Stopped/Boot Start]
  <\SystemRoot\System32\drivers\c22081562.sys><N/A>
[c22543578 / c22543578][Stopped/Boot Start]
  <\SystemRoot\System32\drivers\c22543578.sys><N/A>
[c22566328 / c22566328][Stopped/Boot Start]
  <\SystemRoot\System32\drivers\c22566328.sys><N/A>
[c22631906 / c22631906][Stopped/Boot Start]
  <\SystemRoot\System32\drivers\c22631906.sys><N/A>
[c22754375 / c22754375][Stopped/Boot Start]
  <\SystemRoot\System32\drivers\c22754375.sys><N/A>
[c2409031 / c2409031][Stopped/Boot Start]
  <\SystemRoot\System32\drivers\c2409031.sys><N/A>
[c2466781 / c2466781][Stopped/Boot Start]
  <\SystemRoot\System32\drivers\c2466781.sys><N/A>
[c2488796 / c2488796][Stopped/Boot Start]
  <\SystemRoot\System32\drivers\c2488796.sys><N/A>
[c25683250 / c25683250][Stopped/Boot Start]
  <\SystemRoot\System32\drivers\c25683250.sys><N/A>
[c26181640 / c26181640][Stopped/Boot Start]
  <\SystemRoot\System32\drivers\c26181640.sys><N/A>
[c26209171 / c26209171][Stopped/Boot Start]
  <\SystemRoot\System32\drivers\c26209171.sys><N/A>
[c26239187 / c26239187][Stopped/Boot Start]
  <\SystemRoot\System32\drivers\c26239187.sys><N/A>
[c26239796 / c26239796][Stopped/Boot Start]
  <\SystemRoot\System32\drivers\c26239796.sys><N/A>
[c27006765 / c27006765][Stopped/Boot Start]
  <\SystemRoot\System32\drivers\c27006765.sys><N/A>
[c27358828 / c27358828][Stopped/Boot Start]
  <\SystemRoot\System32\drivers\c27358828.sys><N/A>
[c2780546 / c2780546][Stopped/Boot Start]
  <\SystemRoot\System32\drivers\c2780546.sys><N/A>
[c27873343 / c27873343][Stopped/Boot Start]
  <\SystemRoot\System32\drivers\c27873343.sys><N/A>
[c28134406 / c28134406][Stopped/Boot Start]
  <\SystemRoot\System32\drivers\c28134406.sys><N/A>
[c28185421 / c28185421][Stopped/Boot Start]
  <\SystemRoot\System32\drivers\c28185421.sys><N/A>
[c28356343 / c28356343][Stopped/Boot Start]
  <\SystemRoot\System32\drivers\c28356343.sys><N/A>
[c28410250 / c28410250][Stopped/Boot Start]
  <\SystemRoot\System32\drivers\c28410250.sys><N/A>
[c28439281 / c28439281][Stopped/Boot Start]
  <\SystemRoot\System32\drivers\c28439281.sys><N/A>
[c28529296 / c28529296][Stopped/Boot Start]
  <\SystemRoot\System32\drivers\c28529296.sys><N/A>
[c29040453 / c29040453][Stopped/Boot Start]
  <\SystemRoot\System32\drivers\c29040453.sys><N/A>
[c29062421 / c29062421][Stopped/Boot Start]
  <\SystemRoot\System32\drivers\c29062421.sys><N/A>
[c29105312 / c29105312][Stopped/Boot Start]
  <\SystemRoot\System32\drivers\c29105312.sys><N/A>
[c29136265 / c29136265][Stopped/Boot Start]
  <\SystemRoot\System32\drivers\c29136265.sys><N/A>
[c29195093 / c29195093][Stopped/Boot Start]
  <\SystemRoot\System32\drivers\c29195093.sys><N/A>
[c29198406 / c29198406][Stopped/Boot Start]
  <\SystemRoot\System32\drivers\c29198406.sys><N/A>
[c29310484 / c29310484][Stopped/Boot Start]
  <\SystemRoot\System32\drivers\c29310484.sys><N/A>
[c29339328 / c29339328][Stopped/Boot Start]
  <\SystemRoot\System32\drivers\c29339328.sys><N/A>
[c30700484 / c30700484][Stopped/Boot Start]
  <\SystemRoot\System32\drivers\c30700484.sys><N/A>
[c30769531 / c30769531][Stopped/Boot Start]
  <\SystemRoot\System32\drivers\c30769531.sys><N/A>
[c3085421 / c3085421][Stopped/Boot Start]
  <\SystemRoot\System32\drivers\c3085421.sys><N/A>
[c32695531 / c32695531][Stopped/Boot Start]
  <\SystemRoot\System32\drivers\c32695531.sys><N/A>
[c33184406 / c33184406][Stopped/Boot Start]
  <\SystemRoot\System32\drivers\c33184406.sys><N/A>
[c33343937 / c33343937][Stopped/Boot Start]
  <\SystemRoot\System32\drivers\c33343937.sys><N/A>
[c33363750 / c33363750][Stopped/Boot Start]
  <\SystemRoot\System32\drivers\c33363750.sys><N/A>
[c34019140 / c34019140][Stopped/Boot Start]
  <\SystemRoot\System32\drivers\c34019140.sys><N/A>
[c34131625 / c34131625][Stopped/Boot Start]
  <\SystemRoot\System32\drivers\c34131625.sys><N/A>
[c34191890 / c34191890][Stopped/Boot Start]
  <\SystemRoot\System32\drivers\c34191890.sys><N/A>
[c34568562 / c34568562][Stopped/Boot Start]
  <\SystemRoot\System32\drivers\c34568562.sys><N/A>
[c34599156 / c34599156][Stopped/Boot Start]
  <\SystemRoot\System32\drivers\c34599156.sys><N/A>
[c34634296 / c34634296][Stopped/Boot Start]
  <\SystemRoot\System32\drivers\c34634296.sys><N/A>
[c34661968 / c34661968][Stopped/Boot Start]
  <\SystemRoot\System32\drivers\c34661968.sys><N/A>
[c34767140 / c34767140][Stopped/Boot Start]
  <\SystemRoot\System32\drivers\c34767140.sys><N/A>
[c34814875 / c34814875][Stopped/Boot Start]
  <\SystemRoot\System32\drivers\c34814875.sys><N/A>
[c35469281 / c35469281][Stopped/Boot Start]
  <\SystemRoot\System32\drivers\c35469281.sys><N/A>
[c36068671 / c36068671][Stopped/Boot Start]
  <\SystemRoot\System32\drivers\c36068671.sys><N/A>
[c3832171 / c3832171][Stopped/Boot Start]
  <\SystemRoot\System32\drivers\c3832171.sys><N/A>
[c3872281 / c3872281][Stopped/Boot Start]
  <\SystemRoot\System32\drivers\c3872281.sys><N/A>
[c3887343 / c3887343][Stopped/Boot Start]
  <\SystemRoot\System32\drivers\c3887343.sys><N/A>
[c38944265 / c38944265][Stopped/Boot Start]
  <\SystemRoot\System32\drivers\c38944265.sys><N/A>
[c39014390 / c39014390][Stopped/Boot Start]
  <\SystemRoot\System32\drivers\c39014390.sys><N/A>
[c40623484 / c40623484][Stopped/Boot Start]
  <\SystemRoot\System32\drivers\c40623484.sys><N/A>
[c40680812 / c40680812][Stopped/Boot Start]
  <\SystemRoot\System32\drivers\c40680812.sys><N/A>
[c40713828 / c40713828][Stopped/Boot Start]
  <\SystemRoot\System32\drivers\c40713828.sys><N/A>
[c40792140 / c40792140][Stopped/Boot Start]
  <\SystemRoot\System32\drivers\c40792140.sys><N/A>
[c41200812 / c41200812][Stopped/Boot Start]
  <\SystemRoot\System32\drivers\c41200812.sys><N/A>
[c444421 / c444421][Stopped/Boot Start]
  <\SystemRoot\System32\drivers\c444421.sys><N/A>
[c48508125 / c48508125][Stopped/Boot Start]
  <\SystemRoot\System32\drivers\c48508125.sys><N/A>
[c48580093 / c48580093][Stopped/Boot Start]
  <\SystemRoot\System32\drivers\c48580093.sys><N/A>
[c50927312 / c50927312][Stopped/Boot Start]
  <\SystemRoot\System32\drivers\c50927312.sys><N/A>
[c51011906 / c51011906][Stopped/Boot Start]
  <\SystemRoot\System32\drivers\c51011906.sys><N/A>
[c51149140 / c51149140][Stopped/Boot Start]
  <\SystemRoot\System32\drivers\c51149140.sys><N/A>
[c51528484 / c51528484][Stopped/Boot Start]
  <\SystemRoot\System32\drivers\c51528484.sys><N/A>
[c57415421 / c57415421][Stopped/Boot Start]
  <\SystemRoot\System32\drivers\c57415421.sys><N/A>
[c58230562 / c58230562][Stopped/Boot Start]
  <\SystemRoot\System32\drivers\c58230562.sys><N/A>
[c59293500 / c59293500][Stopped/Boot Start]
  <\SystemRoot\System32\drivers\c59293500.sys><N/A>
[c60620984 / c60620984][Stopped/Boot Start]
  <\SystemRoot\System32\drivers\c60620984.sys><N/A>
[c60652000 / c60652000][Stopped/Boot Start]
  <\SystemRoot\System32\drivers\c60652000.sys><N/A>
[c61568828 / c61568828][Stopped/Boot Start]
  <\SystemRoot\System32\drivers\c61568828.sys><N/A>
[c6241500 / c6241500][Stopped/Boot Start]
  <\SystemRoot\System32\drivers\c6241500.sys><N/A>
[c624234 / c624234][Stopped/Boot Start]
  <\SystemRoot\System32\drivers\c624234.sys><N/A>
[c627203 / c627203][Stopped/Boot Start]
  <\SystemRoot\System32\drivers\c627203.sys><N/A>
[c6274828 / c6274828][Stopped/Boot Start]
  <\SystemRoot\System32\drivers\c6274828.sys><N/A>
[c6321625 / c6321625][Stopped/Boot Start]
  <\SystemRoot\System32\drivers\c6321625.sys><N/A>
[c681140 / c681140][Stopped/Boot Start]
  <\SystemRoot\System32\drivers\c681140.sys><N/A>
[c703062 / c703062][Stopped/Boot Start]
  <\SystemRoot\System32\drivers\c703062.sys><N/A>
[c7548703 / c7548703][Stopped/Boot Start]
  <\SystemRoot\System32\drivers\c7548703.sys><N/A>
[c7738453 / c7738453][Stopped/Boot Start]
  <\SystemRoot\System32\drivers\c7738453.sys><N/A>
[c8000250 / c8000250][Stopped/Boot Start]
  <\SystemRoot\System32\drivers\c8000250.sys><N/A>
[c8050031 / c8050031][Stopped/Boot Start]
  <\SystemRoot\System32\drivers\c8050031.sys><N/A>
[c8056281 / c8056281][Stopped/Boot Start]
  <\SystemRoot\System32\drivers\c8056281.sys><N/A>
[c8067359 / c8067359][Stopped/Boot Start]
  <\SystemRoot\System32\drivers\c8067359.sys><N/A>
[c819875 / c819875][Stopped/Boot Start]
  <\SystemRoot\System32\drivers\c819875.sys><N/A>
[c84045984 / c84045984][Stopped/Boot Start]
  <\SystemRoot\System32\drivers\c84045984.sys><N/A>
[c84187515 / c84187515][Stopped/Boot Start]
  <\SystemRoot\System32\drivers\c84187515.sys><N/A>
[c84442296 / c84442296][Stopped/Boot Start]
  <\SystemRoot\System32\drivers\c84442296.sys><N/A>
[c84476578 / c84476578][Stopped/Boot Start]
  <\SystemRoot\System32\drivers\c84476578.sys><N/A>
[c84509609 / c84509609][Stopped/Boot Start]
  <\SystemRoot\System32\drivers\c84509609.sys><N/A>
[c84578046 / c84578046][Stopped/Boot Start]
  <\SystemRoot\System32\drivers\c84578046.sys><N/A>
[c85731234 / c85731234][Stopped/Boot Start]
  <\SystemRoot\System32\drivers\c85731234.sys><N/A>
[c85982468 / c85982468][Stopped/Boot Start]
  <\SystemRoot\System32\drivers\c85982468.sys><N/A>
[c86536500 / c86536500][Stopped/Boot Start]
  <\SystemRoot\System32\drivers\c86536500.sys><N/A>
[c87488843 / c87488843][Stopped/Boot Start]
  <\SystemRoot\System32\drivers\c87488843.sys><N/A>
[c9681515 / c9681515][Stopped/Boot Start]
  <\SystemRoot\System32\drivers\c9681515.sys><N/A>
[c9757578 / c9757578][Stopped/Boot Start]
  <\SystemRoot\System32\drivers\c9757578.sys><N/A>
[c9829546 / c9829546][Stopped/Boot Start]
  <\SystemRoot\System32\drivers\c9829546.sys><N/A>
[c9927109 / c9927109][Stopped/Boot Start]
  <\SystemRoot\System32\drivers\c9927109.sys><N/A>
[c9937109 / c9937109][Stopped/Boot Start]
  <\SystemRoot\System32\drivers\c9937109.sys><N/A>
[CmdIde / CmdIde][Running/Boot Start]
  <\SystemRoot\System32\DRIVERS\cmdide.sys><CMD Technology, Inc.>
[EfiSystemMon / EfiMon][Running/System Start]
  <System32\Drivers\Efimon.sys><奇虎网>
[VIA PCI 10/100Mb Fast Ethernet Adapter NT Driver / FETNDIS][Stopped/Manual Start]
  <system32\DRIVERS\fetnd5.sys><VIA Technologies, Inc.>
[Microsoft UAA Bus Driver for High Definition Audio / HDAudBus][Running/Manual Start]
  <system32\DRIVERS\HDAudBus.sys><Windows (R) Server 2003 DDK provider>
[hookcont / hookcont][Running/System Start]
  <system32\drivers\HookCont.sys><Beijing Rising Information Technology Co., Ltd.>
[HookPort / HookPort][Running/Boot Start]
  <\SystemRoot\System32\Drivers\Hookport.sys><360安全中心>
[hooksys / hooksys][Running/System Start]
  <system32\drivers\HookSys.sys><Beijing Rising Information Technology Co., Ltd.>
[Supplicant Helper / IAmt][Running/Manual Start]
  <system32\DRIVERS\iamt.sys><amtium>
[Service for Realtek HD Audio (WDM) / IntcAzAudAddService][Running/Manual Start]
  <system32\drivers\RtkHDAud.sys><Realtek Semiconductor Corp.>
[Elantech Touchpad / Ktp][Stopped/Manual Start]
  <system32\DRIVERS\Ktp.sys><ELANTECH Devices Corp.>
[Netgroup Packet Filter / NPF][Running/Manual Start]
  <system32\drivers\npf.sys><CACE Technologies>
[npkcrypt / npkcrypt][Stopped/Auto Start]
  <\??\C:\Program Files\QQ2006\npkcrypt.sys><N/A>
[nv / nv][Running/Manual Start]
  <system32\DRIVERS\nv4_mini.sys><NVIDIA Corporation>
[Direct Parallel Link Driver / Ptilink][Running/Manual Start]
  <system32\DRIVERS\ptilink.sys><Parallel Technologies, Inc.>
[rimmptsk / rimmptsk][Running/Manual Start]
  <system32\DRIVERS\rimmptsk.sys><REDC>
[rimsptsk / rimsptsk][Running/Manual Start]
  <system32\DRIVERS\rimsptsk.sys><REDC>
[RsNTGDI / RsNTGDI][Running/Boot Start]
  <\SystemRoot\system32\Drivers\RsNTGdi.sys><Beijing Rising Information Technology Co., Ltd.>
[RsProtect / RsProtect][Running/System Start]
  <system32\drivers\RsPtect.sys><Beijing Rising Information Technology Co., Ltd.>
[Realtek 10/100/1000 NIC Family all in one NDIS XP Driver / RTL8023xp][Running/Manual Start]
  <system32\DRIVERS\Rtnicxp.sys><Realtek Semiconductor Corporation>
[SafeBoxKrnl / SafeBoxKrnl][Running/System Start]
  <\??\C:\windows\system32\drivers\SafeBoxKrnl.sys><360安全中心>
[Secdrv / Secdrv][Stopped/Manual Start]
  <system32\DRIVERS\secdrv.sys><Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K.>
[sepco / sepco][Stopped/Boot Start]
  <\SystemRoot\\SystemRoot\System32\drivers\sepco.sys><N/A>
[TCP/IP Protocol Driver / Tcpip][Running/System Start]
  <system32\DRIVERS\tcpip.sys><Microsoft Corporation>
[tifm21 / tifm21][Stopped/Manual Start]
  <system32\drivers\tifm21.sys><Texas Instruments>
[Topstar ACPI BIOS Method Device Driver / TPSACPI][Running/Boot Start]
  <\SystemRoot\system32\DRIVERS\TPSACPI.sys><N/A>
[51609 / 51609][Running/Manual Start]
  <2 - 系统找不到指定的文件。
><N/A>

==================================
浏览器加载项
[ThunderAtOnce Class]
  {01443AEC-0FD1-40fd-9C87-E93D1494C233} <C:\Program Files\Thunder Network\Thunder\ComDlls\TDAtOnce_Now.dll, (Signed) 深圳市迅雷网络技术有限公司>
[Baidu Toolbar BHO]
  {77FEF28E-EB96-44FF-B511-3185DEA48697} <C:\Program Files\Baidu\Toolbar\BaiduBarX.dll, (Signed) >
[Thunder Browser Helper]
  {889D2FEB-5411-4565-8998-1DD2C5261283} <C:\Program Files\Thunder Network\Thunder\ComDlls\xunleiBHO_Now.dll, (Signed) 深圳市迅雷网络技术有限公司>
[卡卡上网安全助手]
  {98B7C13A-E9CD-4959-8B46-FBEAB41E42A8} <C:\windows\system32\UrlFilter.dll, (Signed) Beijing Rising Information Technology Co., Ltd.>
[Download_Bho Class]
  {A986E409-30CC-4185-89BB-AB212C104524} <C:\Program Files\PPLiveVA\DownloaderManager.dll, (Signed) Synacast>
[SafeMon Class]
  {B69F34DD-F0F9-42DC-9EDD-957187DA688D} <C:\Program Files\360safe\safemon\safemon.dll, (Signed) 360.CN>
[PPLive]
  {95B3F550-91C4-4627-BCC4-521288C52977} <C:\Program Files\PPLive\PPLive.exe, (Signed)  >
[@btrez.dll,-4015]
  {CCA281CA-C863-46ef-9331-5C8D4460577F} <, >
[]
  {e2e2dd38-d088-4134-82b7-f2ba38496583} <%windir%\Network Diagnostic\xpnetdiag.exe, (Signed) N/A>
[Messenger]
  {FB5F1910-F110-11d2-BB9E-00C04F795683} <C:\Program Files\Messenger\msmsgs.exe, (Signed) Microsoft Corporation>
[Baidu Toolbar]
  {B580CF65-E151-49C3-B73F-70B13FCA8E86} <C:\Program Files\Baidu\Toolbar\BaiduBarX.dll, (Signed) >
[AxSubmitControl Class]
  {8D9E0B29-563C-4226-86C1-5FF2AE77E1D2} <C:\WINDOWS\DOWNLO~1\SUBMIT~1.DLL, N/A>
[ScreenCapture Class]
  {BFB79EE1-04AE-4D4A-B85E-27EE5F30C095} <C:\WINDOWS\system32\TXGYMailActiveX.dll, (Signed) Tencent Inc.>
[]
  {00EF2092-6AC5-47C0-BD25-CF2D5D657FEB} <, >
[ThunderAtOnce Class]
  {01443AEC-0FD1-40FD-9C87-E93D1494C233} <C:\Program Files\Thunder Network\Thunder\ComDlls\TDAtOnce_Now.dll, (Signed) 深圳市迅雷网络技术有限公司>
[ActiveMovieControl Object]
  {05589FA1-C356-11CE-BF01-00AA0055595A} <C:\WINDOWS\system32\wmpdxm.dll, (Signed) Microsoft Corporation>
[]
  {09BA8F6D-CB54-424B-839C-C2A6C8E6B436} <, >
[]
  {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} <, >
[]
  {116BA71C-8187-4F15-9A1F-C9D6289155D1} <, >
[]
  {1A145226-AF0D-4951-A47F-568C09EF17FA} <, >
[Windows Media Player]
  {22D6F312-B0F6-11D0-94AB-0080C74C7E95} <C:\WINDOWS\system32\wmpdxm.dll, (Signed) Microsoft Corporation>
[]
  {2318C2B1-4965-11D4-9B18-009027A5CD4F} <, >
[]
  {2375BEE5-F175-4F1C-81EC-8E4E2E72E2DD} <, >
[]
  {2423AB16-9F42-457B-A337-FE3B11964DB0} <, >
[HTML Document]
  {25336920-03F9-11CF-8FD0-00AA00686F13} <C:\WINDOWS\system32\mshtml.dll, (Signed) Microsoft Corporation>
[XML DOM Document]
  {2933BF90-7B36-11D2-B20E-00C04F983E60} <C:\windows\system32\msxml3.dll, (Signed) Microsoft Corporation>
[XSL Template]
  {2933BF94-7B36-11D2-B20E-00C04F983E60} <C:\windows\system32\msxml3.dll, (Signed) Microsoft Corporation>
[]
  {2974c985-8151-4de5-b23c-b875f0a8522f} <, >
[DHTML Edit Control Safe for Scripting for IE5]
  {2D360201-FFF5-11D1-8D03-00A0C959BC0A} <C:\Program Files\Common Files\Microsoft Shared\Triedit\dhtmled.ocx, (Signed) Microsoft Corporation>
[]
  {3072B1F1-0C4D-4E76-A7C6-FBAF129DBCC9} <, >
[IETag Factory]
  {38481807-CA0E-42D2-BF39-B33AF135CC4D} <C:\PROGRA~1\COMMON~1\MICROS~1\SMARTT~1\IETAG.DLL, (Signed) Microsoft Corporation>
[XML Document]
  {48123BC4-99D9-11D1-A6B3-00C04FD91555} <C:\windows\system32\msxml3.dll, (Signed) Microsoft Corporation>
[Thunder Agent Class]
  {485463B7-8FB2-4B3B-B29B-8B919B0EACCE} <C:\Program Files\Thunder Network\Thunder\ComDlls\ThunderAgent5.9.5.989.dll, (Signed) 深圳市迅雷网络技术有限公司>
[]
  {488A4255-3236-44B3-8F27-FA1AECAA8844} <, >
[HHCtrl Object]
  {52A2AAAE-085D-4187-97EA-8C30DB990436} <C:\WINDOWS\system32\hhctrl.ocx, (Signed) Microsoft Corporation>
[PowerPlayer Control]
  {5EC7C511-CD0F-42E6-830C-1BD9882F3458} <C:\PROGRA~1\PPStream\POWERP~1.DLL, (Signed) PPStream Inc.>
[XMP Class]
  {6483F145-A768-4C41-AACC-52D4D7845851} <C:\Documents and Settings\All Users\Application Data\Thunder Network\KanKan\xplayer.dll_1_work, 深圳市迅雷网络技术有限公司>
[StormPlayer Object]
  {6BE52E1D-E586-474F-A6E2-1A85A9B4D9FB} <C:\Program Files\StormII\mps.dll, (Signed) 北京暴风网际科技有限公司>
[Windows Media Player]
  {6BF52A52-394A-11D3-B153-00C04F79FAA6} <C:\WINDOWS\system32\wmp.dll, (Signed) Microsoft Corporation>
[AxInputControl Class]
  {73E4740C-08EB-4133-896B-8D0A7C9EE3CD} <C:\WINDOWS\DOWNLO~1\INPUTC~1.DLL, N/A>
[MediaComm Class]
  {7670648D-461B-42AF-BDFE-46D26AF5EFF2} <C:\Program Files\Thunder Network\Thunder\Components\InMedia\MediaAddin.dll, (Signed) 深圳市迅雷网络技术有限公司>
[Baidu Toolbar BHO]
  {77FEF28E-EB96-44FF-B511-3185DEA48697} <C:\Program Files\Baidu\Toolbar\BaiduBarX.dll, (Signed) >
[]
  {7E8FDA24-16DD-445D-8E84-0B6714FF9C25} <, >
[]
  {80BF4637-D65B-43F3-BB60-C5DD3D5FB7B9} <, >
[360SafeLive]
  {87515F61-A66C-4319-A0E0-D416CB8059E3} <C:\Program Files\360safe\live.dll, (Signed) 360.cn>
[Microsoft Web Browser]
  {8856F961-340A-11D0-A96B-00C04FD705A2} <C:\WINDOWS\system32\ieframe.dll, (Signed) Microsoft Corporation>
[Thunder Browser Helper]
  {889D2FEB-5411-4565-8998-1DD2C5261283} <C:\Program Files\Thunder Network\Thunder\ComDlls\xunleiBHO_Now.dll, (Signed) 深圳市迅雷网络技术有限公司>
[XML DOM 文档 5.0]
  {88D969E5-F192-11D4-A65F-0040963251E5} <C:\Program Files\Common Files\Microsoft Shared\OFFICE11\MSXML5.DLL, Microsoft Corporation>
[Free Threaded XML DOM Document 5.0]
  {88D969E6-F192-11D4-A65F-0040963251E5} <C:\Program Files\Common Files\Microsoft Shared\OFFICE11\MSXML5.DLL, Microsoft Corporation>
[XSL Template 5.0]
  {88D969E8-F192-11D4-A65F-0040963251E5} <C:\Program Files\Common Files\Microsoft Shared\OFFICE11\MSXML5.DLL, Microsoft Corporation>
[XML HTTP 5.0]
  {88D969EA-F192-11D4-A65F-0040963251E5} <C:\Program Files\Common Files\Microsoft Shared\OFFICE11\MSXML5.DLL, Microsoft Corporation>
[XML DOM Document 6.0]
  {88D96A05-F192-11D4-A65F-0040963251E5} <C:\WINDOWS\system32\msxml6.dll, (Signed) Microsoft Corporation>
[XML HTTP 6.0]
  {88D96A0A-F192-11D4-A65F-0040963251E5} <C:\WINDOWS\system32\msxml6.dll, (Signed) Microsoft Corporation>
[Uploader Class]
  {8B054DFE-79A3-4A6A-9F46-CD2A2F601129} <C:\WINDOWS\system32\TXGYMailActiveX.dll, (Signed) Tencent Inc.>
[AxSubmitControl Class]
  {8D9E0B29-563C-4226-86C1-5FF2AE77E1D2} <C:\WINDOWS\DOWNLO~1\SUBMIT~1.DLL, N/A>
[]
  {95B3F550-91C4-4627-BCC4-521288C52977} <, >
[OFrameObject Class]
  {9701758C-4373-482E-B13C-776C048EC890} <C:\Program Files\Common Files\Thunder Network\KanKan\DapCtrl.2.3.5904.184.(989).dll, (Signed) 深圳市迅雷网络技术有限公司>
[卡卡上网安全助手]
  {98B7C13A-E9CD-4959-8B46-FBEAB41E42A8} <C:\windows\system32\UrlFilter.dll, (Signed) Beijing Rising Information Technology Co., Ltd.>
[]
  {998A88A0-A355-809B-831C-B83A80000991} <, >
[]
  {998A88A0-A355-809B-831C-B83A80000992} <, >
[VersionDetector Class]
  {9EFF1953-9694-47B1-AEF6-B2A3FE8BFE9B} <C:\Program Files\Common Files\Thunder Network\KanKan\vd.1.1.0.22.(783).dll, (Signed) 深圳市迅雷网络技术有限公司>
[百度工具栏辅助对象]
  {A7F05EE4-0426-454F-8013-C41E3596E9E9} <C:\Program Files\Baidu\Toolbar\BaiduBarX.dll, (Signed) >
[UploadFilePartition Class]
  {A877BA28-1F7E-4876-B299-50B3199A1A5D} <C:\WINDOWS\system32\TXGYMailActiveX.dll, (Signed) Tencent Inc.>
[Download_Bho Class]
  {A986E409-30CC-4185-89BB-AB212C104524} <C:\Program Files\PPLiveVA\DownloaderManager.dll, (Signed) Synacast>
[]
  {AA58ED58-01DD-4D91-8333-CF10577473F7} <, >
[CCTVUpdateInstall]
  {AC414988-E5BB-4C2C-873B-EA53D2F3D23A} <C:\Documents and Settings\Administrator\Application Data\CCTV\tv\CCTVUpdateInstall.dll, (Signed) CCTV International Networks Co.,Ltd>
[DapCtrl Class]
  {ACACC6EB-1FBA-4E13-A729-53AEB2DF54F8} <C:\Program Files\Common Files\Thunder Network\KanKan\DapCtrl.2.3.5904.184.(989).dll, (Signed) 深圳市迅雷网络技术有限公司>
[Alpha]
  {ADC6CB82-424C-11D2-952A-00C04FA34F05} <C:\WINDOWS\system32\Dxtmsft.dll, (Signed) Microsoft Corporation>
[Microsoft Scriptlet Component]
  {AE24FDAE-03C6-11D1-8B76-0080C744F389} <C:\WINDOWS\system32\mshtml.dll, (Signed) Microsoft Corporation>
[Wipe]
  {AF279B30-86EB-11D1-81BF-0000F87557DB} <C:\WINDOWS\system32\Dxtmsft.dll, (Signed) Microsoft Corporation>
[]
  {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} <, >
[SearchAssistantOC]
  {B45FF030-4447-11D2-85DE-00C04FA35C89} <%SystemRoot%\system32\shdocvw.dll, (Signed) N/A>
[Baidu Toolbar]
  {B580CF65-E151-49C3-B73F-70B13FCA8E86} <C:\Program Files\Baidu\Toolbar\BaiduBarX.dll, (Signed) >
[]
  {B5A34A93-D538-43A7-8371-864CB6148D12} <, >
[Messenger Object]
  {B69003B3-C55E-4B48-836C-BC5946FC3B28} <C:\Program Files\Messenger\msgsc.dll, (Signed) Microsoft Corporation>
[SafeMon Class]
  {B69F34DD-F0F9-42DC-9EDD-957187DA688D} <C:\Program Files\360safe\safemon\safemon.dll, (Signed) 360.CN>
[ScreenCapture163 Class]
  {B6DEE590-8486-4F35-86BB-265FC72DBD96} <C:\Program Files\NetEase Mail plug-in\163screencapture.dll, NetEase(Hangzhou)Network Tech.Co.,Ltd.>
[RDS.DataSpace]
  {BD96C556-65A3-11D0-983A-00C04FC29E36} <C:\Program Files\Common Files\System\msadc\msadco.dll, (Signed) Microsoft Corporation>
[ScreenCapture Class]
  {BFB79EE1-04AE-4D4A-B85E-27EE5F30C095} <C:\WINDOWS\system32\TXGYMailActiveX.dll, (Signed) Tencent Inc.>
[]
  {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} <, >
[]
  {CCA281CA-C863-46EF-9331-5C8D4460577F} <, >
[QQPlayerSvr Proxy Control]
  {CD108273-D434-43E6-AA90-1469F97EB398} <C:\Program Files\QQ2006\QQPlayerProxy.dll, (Signed) Tencent>
[AUDIO__X_MS_WMA Moniker Class]
  {CD3AFA84-B84F-48F0-9393-7EDC34128127} <C:\WINDOWS\system32\wmp.dll, (Signed) Microsoft Corporation>
[VIDEO__X_MS_ASF Moniker Class]
  {CD3AFA8F-B84F-48F0-9393-7EDC34128127} <C:\WINDOWS\system32\wmp.dll, (Signed) Microsoft Corporation>
[VIDEO__X_MS_WMV Moniker Class]
  {CD3AFA94-B84F-48F0-9393-7EDC34128127} <C:\WINDOWS\system32\wmp.dll, (Signed) Microsoft Corporation>
[RealPlayer G2 Control]
  {CFCDAA03-8BE4-11CF-B84B-0020AFBBCCFA} <C:\Program Files\StormII\Codec\rmoc3260.dll, N/A>
[Shockwave Flash Object]
  {D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\WINDOWS\system32\Macromed\Flash\Flash10c.ocx, (Signed) Adobe Systems, Inc.>
[KuAgent2 Class]
  {D928E486-C465-4A64-976D-F3B24BBECC69} <C:\Program Files\YouKu\iKu\YouKuAgent.dll, (Signed) www.youku.com>
[]
  {E0DA78C6-34F2-4404-A2A5-A7539B040271} <, >
[]
  {E2E2DD38-D088-4134-82B7-F2BA38496583} <, >
[]
  {EAB7A1CC-C77B-45E5-9AC2-AD037D047BCC} <, >
[TimwpDll.TimwpCheck]
  {ED4CA2E5-0EEA-44C1-AD7E-74A07A7507A4} <C:\PROGRA~1\QQ2006\Timwp.dll, (Signed) TENCENT>
[XML HTTP Request]
  {ED8C108E-4349-11D2-91A4-00C04F7969E8} <C:\windows\system32\msxml3.dll, (Signed) Microsoft Corporation>
[PPLive Lite Class]
  {EF0D1A14-1033-41A2-A589-240C01EDC078} <C:\Program Files\PPLive\Plugin\pplugin2.dll, (Signed) >
[XPPlayer Class]
  {F3E70CEA-956E-49CC-B444-73AFE593AD7F} <C:\Program Files\Common Files\Thunder Network\KanKan\PPlayer.2.1.59050.255.(988).dll, (Signed) 深圳市迅雷网络技术有限公司>
[XML DOM Document 3.0]
  {F5078F32-C551-11D3-89B9-0000F81FE221} <C:\windows\system32\msxml3.dll, (Signed) Microsoft Corporation>
[Free Threaded XML DOM Document 3.0]
  {F5078F33-C551-11D3-89B9-0000F81FE221} <C:\windows\system32\msxml3.dll, (Signed) Microsoft Corporation>
[XML HTTP 3.0]
  {F5078F35-C551-11D3-89B9-0000F81FE221} <C:\windows\system32\msxml3.dll, (Signed) Microsoft Corporation>
[XSL Template 3.0]
  {F5078F36-C551-11D3-89B9-0000F81FE221} <C:\windows\system32\msxml3.dll, (Signed) Microsoft Corporation>
[]
  {F5CEC604-49EC-4F59-B04F-4048FED9EE13} <, >
[XML DOM Document]
  {F6D90F11-9C73-11D3-B32E-00C04F990BB4} <C:\windows\system32\msxml3.dll, (Signed) Microsoft Corporation>
[Free Threaded XML DOM Document]
  {F6D90F12-9C73-11D3-B32E-00C04F990BB4} <C:\windows\system32\msxml3.dll, (Signed) Microsoft Corporation>
[XML HTTP]
  {F6D90F16-9C73-11D3-B32E-00C04F990BB4} <C:\windows\system32\msxml3.dll, (Signed) Microsoft Corporation>
[]
  {FB5F1910-F110-11D2-BB9E-00C04F795683} <, >
[+放进我的口袋(&Y)]
  <http://koudai.360.cn/post_js.html, N/A>
[使用迅雷下载]
  <C:\Program Files\Thunder Network\Thunder\Program\GetUrl.htm, N/A>
[使用迅雷下载全部链接]
  <C:\Program Files\Thunder Network\Thunder\Program\GetAllUrl.htm, N/A>

==================================
正在运行的进程
[PID: 852 / SYSTEM][\SystemRoot\System32\smss.exe]  [(Verified) Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111)]
[PID: 908 / SYSTEM][\??\C:\windows\system32\csrss.exe]  [(Verified) Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111)]
[PID: 940 / SYSTEM][\??\C:\windows\system32\winlogon.exe]  [(Verified) Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113)]
[PID: 984 / SYSTEM][C:\windows\system32\services.exe]  [(Verified) Microsoft Corporation, 5.1.2600.5755 (xpsp_sp3_qfe.090206-1316)]
[PID: 996 / SYSTEM][C:\windows\system32\lsass.exe]  [(Verified) Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113)]
[PID: 1164 / SYSTEM][C:\windows\system32\svchost.exe]  [(Verified) Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111)]
[PID: 1280 / NETWORK SERVICE][C:\windows\system32\svchost.exe]  [(Verified) Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111)]
[PID: 1436 / SYSTEM][C:\Program Files\Rising\Rav\CCENTER.EXE]  [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 2]
    [C:\Program Files\Rising\Rav\combase.dll]  [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 11]
    [C:\Program Files\Rising\Rav\cnt09.dll]  [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 37]
    [C:\Program Files\Rising\Rav\cnt08.dll]  [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 7]
[PID: 1444 / SYSTEM][C:\windows\System32\svchost.exe]  [(Verified) Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111)]
    [C:\Program Files\Rising\Rav\RavScrCh.dll]  [Beijing Rising Information Technology Co., Ltd., 21.0.0.78]
    [C:\windows\system32\MSVCP71.dll]  [Microsoft Corporation, 7.10.3077.0]
    [C:\windows\system32\MSVCR71.dll]  [Microsoft Corporation, 7.10.3052.4]
[PID: 1488 / SYSTEM][C:\Program Files\Rising\Rav\RavTask.exe]  [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 24]
    [C:\Program Files\Rising\Rav\proccomm.dll]  [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 46]
    [C:\windows\system32\MSVCR71.dll]  [Microsoft Corporation, 7.10.3052.4]
    [C:\windows\system32\MSVCP71.dll]  [Microsoft Corporation, 7.10.3077.0]
    [C:\Program Files\Rising\Rav\rsconf.dll]  [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 4]
    [C:\Program Files\Rising\Rav\RSAPPMGR.dll]  [Beijing Rising Information Technology Co., Ltd., 21.0.0.1]
    [C:\Program Files\Rising\Rav\CfgDll.dll]  [Beijing Rising Information Technology Co., Ltd., 21.0.0.20]
    [C:\Program Files\Rising\Rav\rstask.dll]  [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 40]
    [C:\Program Files\Rising\Rav\rsstub.dll]  [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 12]
[PID: 1568 / NETWORK SERVICE][C:\windows\system32\svchost.exe]  [(Verified) Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111)]
[PID: 1748 / LOCAL SERVICE][C:\windows\system32\svchost.exe]  [(Verified) Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111)]
[PID: 1816 / SYSTEM][C:\Program Files\Rising\Rav\RavMonD.exe]  [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 2]
    [C:\Program Files\Rising\Rav\combase.dll]  [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 11]
    [C:\windows\system32\MSVCP71.dll]  [Microsoft Corporation, 7.10.3077.0]
    [C:\windows\system32\MSVCR71.dll]  [Microsoft Corporation, 7.10.3052.4]
    [C:\Program Files\Rising\Rav\moncomm.dll]  [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 13]
    [C:\Program Files\Rising\Rav\MonBase.dll]  [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 6]
    [C:\Program Files\Rising\Rav\Rslog.dll]  [Beijing Rising Information Technology Co., Ltd., 21.0.0.41]
    [C:\Program Files\Rising\Rav\mondrv.dll]  [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 9]
    [C:\Program Files\Rising\Rav\defmon.dll]  [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 31]
    [C:\Program Files\Rising\Rav\moncom08.dll]  [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 1]
    [C:\Program Files\Rising\Rav\MonRule.dll]  [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 9]
    [C:\Program Files\Rising\Rav\FileMon.dll]  [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 28]
    [C:\Program Files\Rising\Rav\MailMon.dll]  [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 24]
    [C:\Program Files\Rising\Rav\HookWeb.dll]  [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 11]
    [C:\Program Files\Rising\Rav\proccomm.dll]  [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 46]
    [C:\Program Files\Rising\Rav\RSAPPMGR.dll]  [Beijing Rising Information Technology Co., Ltd., 21.0.0.1]
    [C:\Program Files\Rising\Rav\CfgDll.dll]  [Beijing Rising Information Technology Co., Ltd., 21.0.0.20]
    [C:\Program Files\Rising\Rav\comx3.dll]  [Beijing Rising Information Technology Co., Ltd., 21.0.0.37]
    [C:\Program Files\Rising\Rav\Syslay.dll]  [Beijing Rising Information Technology Co., Ltd., 21.0.0.6]
    [C:\Program Files\Rising\Rav\Hooksys.dll]  [Beijing Rising Information Technology Co., Ltd., 23, 0, 0, 18]
    [C:\Program Files\Rising\Rav\ProcCom.dll]  [Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 20]
    [C:\Program Files\Rising\Rav\RsCommX2.dll]  [Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 20]
    [C:\Program Files\Rising\Rav\HookCont.dll]  [Beijing Rising Information Technology Co., Ltd., 23, 0, 0, 12]
    [C:\Program Files\Rising\Rav\rsnetsvr.dll]  [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 14]
    [C:\Program Files\Rising\Rav\BACore.dll]  [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 22]
    [C:\Program Files\Rising\Rav\recomp.dll]  [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 4]
    [C:\Program Files\Rising\Rav\refs.dll]  [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 5]
    [C:\Program Files\Rising\Rav\RSStore.dll]  [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 13]
    [C:\Program Files\Rising\Rav\ScanAdd.dll]  [Beijing Rising Information Technology Co., Ltd., 21.0.0.19]
    [C:\Program Files\Rising\Rav\Scanner.dll]  [Beijing Rising Information Technology Co., Ltd., 21.0.0.39]
    [C:\Program Files\Rising\Rav\viruslib.dll]  [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 5]
    [C:\Program Files\Rising\Rav\relibldr.dll]  [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 6]
    [C:\Program Files\Rising\Rav\ffr.dll]  [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 3]
    [C:\Program Files\Rising\Rav\nvfile.dll]  [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 3]
    [C:\Program Files\Rising\Rav\scanexec.dll]  [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 6]
    [C:\Program Files\Rising\Rav\unexe.dll]  [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 2]
    [C:\Program Files\Rising\Rav\scanex.dll]  [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 70]
    [C:\Program Files\Rising\Rav\pearc.dll]  [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 4]
    [C:\Program Files\Rising\Rav\scanpe.dll]  [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 16]
    [C:\Program Files\Rising\Rav\ur000.dat]  [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 16]
    [C:\Program Files\Rising\Rav\urutils.dll]  [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 4]
    [C:\Program Files\Rising\Rav\methodex.dll]  [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 4]
    [C:\Program Files\Rising\Rav\revm.dll]  [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 9]
    [C:\Program Files\Rising\Rav\pecompd.dll]  [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 1]
    [C:\Program Files\Rising\Rav\heurex.dll]  [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 11]
    [C:\Program Files\Rising\Rav\extfile.dll]  [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 16]
    [C:\Program Files\Rising\Rav\ur012.dat]  [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 1]
    [C:\Program Files\Rising\Rav\scansct.dll]  [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 3]
    [C:\Program Files\Rising\Rav\ur023.dat]  [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 6]
    [C:\Program Files\Rising\Rav\ur001.dat]  [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 7]
    [C:\Program Files\Rising\Rav\extmail.dll]  [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 5]
[PID: 1912 / SYSTEM][C:\Program Files\Rising\Rav\rsnetsvr.exe]  [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 15]
    [C:\Program Files\Rising\Rav\NComm.dll]  [Beijing Rising Information Technology Co., Ltd., 6.0.0.12]
    [C:\Program Files\Rising\Rav\Syslay.dll]  [Beijing Rising Information Technology Co., Ltd., 21.0.0.6]
    [C:\Program Files\Rising\Rav\comx3.dll]  [Beijing Rising Information Technology Co., Ltd., 21.0.0.37]
    [C:\Program Files\Rising\Rav\ProcComm.dll]  [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 46]
    [C:\windows\system32\MSVCR71.dll]  [Microsoft Corporation, 7.10.3052.4]
    [C:\windows\system32\MSVCP71.dll]  [Microsoft Corporation, 7.10.3077.0]
    [C:\Program Files\Rising\Rav\RavScrCh.dll]  [Beijing Rising Information Technology Co., Ltd., 21.0.0.78]
[PID: 308 / SYSTEM][C:\windows\system32\spoolsv.exe]  [(Verified) Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852)]
    [C:\windows\system32\bthcrp.dll]  [Broadcom Corporation., 5.0.1.801]
    [C:\windows\system32\WidcommSdk.dll]  [Broadcom Corporation., 5.0.1.801]
    [C:\windows\system32\wbtapi.dll]  [Broadcom Corporation., 5.0.1.801]
[PID: 648 / LOCAL SERVICE][C:\windows\system32\svchost.exe]  [(Verified) Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111)]
[PID: 660 / Administrator][C:\windows\Explorer.EXE]  [(Verified) Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105)]
    [C:\Program Files\360safe\safemon\safemon.dll]  [360.CN, 5, 0, 0, 1021]
    [C:\Program Files\Thunder Network\Thunder\ComDlls\xunleiBHO_Now.dll]  [深圳市迅雷网络技术有限公司, 5.9.5.989]
    [C:\Program Files\Thunder Network\Thunder\Components\ResWorker\DsBho_00.dll]  [深圳市迅雷网络技术有限公司, 1, 0, 0, 22]
    [C:\Program Files\Thunder Network\Thunder\Components\ResWorker\DataProcessor_00.dll]  [深圳市迅雷网络技术有限公司, 1, 0, 0, 17]
    [C:\Program Files\Thunder Network\Thunder\ComDlls\TDAtOnce_Now.dll]  [深圳市迅雷网络技术有限公司, 5.9.5.989]
    [C:\windows\system32\ATL71.DLL]  [Microsoft Corporation, 7.10.6041.0]
    [C:\windows\system32\MSVCP71.dll]  [Microsoft Corporation, 7.10.3077.0]
    [C:\windows\system32\MSVCR71.dll]  [Microsoft Corporation, 7.10.3052.4]
    [C:\Program Files\WinRAR\rarext.dll]  [N/A, ]
    [C:\windows\system32\RavExt.dll]  [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 12]
    [C:\WINDOWS\system32\nvcpl.dll]  [NVIDIA Corporation, 6.14.10.8474]
    [C:\windows\system32\NVRSZHC.DLL]  [NVIDIA Corporation, 6.14.10.8474]
    [C:\WINDOWS\system32\nvshell.dll]  [, ]
[PID: 708 / LOCAL SERVICE][C:\windows\system32\svchost.exe]  [(Verified) Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111)]
[PID: 740 / SYSTEM][C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe]  [Broadcom Corporation., 5.0.1.801]
[PID: 1004 / SYSTEM][C:\windows\system32\nvsvc32.exe]  [NVIDIA Corporation, 6.14.10.8474]
[PID: 1332 / SYSTEM][C:\Program Files\Rising\Rav\ScanFrm.exe]  [Beijing Rising Information Technology Co., Ltd., 21.0.0.12]
    [C:\windows\system32\MSVCP71.dll]  [Microsoft Corporation, 7.10.3077.0]
    [C:\windows\system32\MSVCR71.dll]  [Microsoft Corporation, 7.10.3052.4]
    [C:\Program Files\Rising\Rav\combase.dll]  [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 11]
    [C:\Program Files\Rising\Rav\moncomm.dll]  [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 13]
    [C:\Program Files\Rising\Rav\scansrvp.dll]  [Beijing Rising Information Technology Co., Ltd., 21.0.0.13]
    [C:\Program Files\Rising\Rav\proccomm.dll]  [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 46]
    [C:\Program Files\Rising\Rav\ScanSrv.dll]  [Beijing Rising Information Technology Co., Ltd., 21.0.0.10]
    [C:\Program Files\Rising\Rav\comx3.dll]  [Beijing Rising Information Technology Co., Ltd., 21.0.0.37]
    [C:\Program Files\Rising\Rav\Syslay.dll]  [Beijing Rising Information Technology Co., Ltd., 21.0.0.6]
[PID: 1644 / SYSTEM][C:\windows\system32\svchost.exe]  [(Verified) Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111)]
[PID: 1696 / LOCAL SERVICE][C:\WINDOWS\system32\wdfmgr.exe]  [Microsoft Corporation, 5.2.3790.1230 built by: dnsrv(bld4act)]
[PID: 1204 / LOCAL SERVICE][C:\windows\System32\alg.exe]  [(Verified) Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852)]
[PID: 2304 / Administrator][C:\Program Files\Rising\Rav\RsTray.exe]  [Beijing Rising Information Technology Co., Ltd., 21.0.0.22]
    [C:\Program Files\Rising\Rav\ComServ.dll]  [Beijing Rising Information Technology Co., Ltd., 21.0.0.49]
    [C:\windows\system32\MSVCP71.dll]  [Microsoft Corporation, 7.10.3077.0]
    [C:\windows\system32\MSVCR71.dll]  [Microsoft Corporation, 7.10.3052.4]
    [C:\Program Files\Rising\Rav\rslang.dll]  [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 28]
    [C:\Program Files\Rising\Rav\comx3.dll]  [Beijing Rising Information Technology Co., Ltd., 21.0.0.37]
    [C:\Program Files\Rising\Rav\Syslay.dll]  [Beijing Rising Information Technology Co., Ltd., 21.0.0.6]
    [C:\Program Files\Rising\Rav\rsxml.dll]  [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 2]
    [C:\Program Files\Rising\Rav\ProcComm.dll]  [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 46]
    [C:\Program Files\Rising\Rav\MonState.dll]  [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 7]
    [C:\Program Files\Rising\Rav\ScanEvnt.dll]  [Beijing Rising Information Technology Co., Ltd., 21.0.0.14]
    [C:\Program Files\Rising\Rav\rsguilib.dll]  [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 75]
    [C:\windows\system32\MFC71.DLL]  [Microsoft Corporation, 7.10.3077.0]
    [C:\Program Files\Rising\Rav\rsconf.dll]  [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 4]
    [C:\Program Files\Rising\Rav\RSAPPMGR.dll]  [Beijing Rising Information Technology Co., Ltd., 21.0.0.1]
    [C:\Program Files\Rising\Rav\CfgDll.dll]  [Beijing Rising Information Technology Co., Ltd., 21.0.0.20]
    [C:\Program Files\Rising\Rav\rspalvd.dll]  [Beijing Rising Information Technology Co., Ltd., 21.0.0.26]
    [C:\Program Files\Rising\Rav\ravbintl.dll]  [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 29]
    [C:\Program Files\Rising\Rav\mruleui.dll]  [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 10]
    [C:\Program Files\Rising\Rav\MonTray.dll]  [Beijing Rising Information Technology Co., Ltd., 21.0.1.4]
    [C:\Program Files\Rising\Rav\PngDll.dll]  [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 4]
    [C:\Program Files\Rising\Rav\RavITray.dll]  [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 23]
    [C:\Program Files\Rising\Rav\ScanPrxy.dll]  [Beijing Rising Information Technology Co., Ltd., 21.0.0.17]
    [C:\Program Files\Rising\Rav\rsmginfo.dll]  [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 11]
    [C:\Program Files\Rising\Rav\RavScrCh.dll]  [Beijing Rising Information Technology Co., Ltd., 21.0.0.78]
[PID: 2564 / Administrator][C:\Program Files\PPLiveVA\PPLiveVA.exe]  [Synacast, 0, 1, 0, 8]
    [C:\Program Files\PPLiveVA\PPVA.DLL]  [Synacast, 0, 1, 2, 72]
    [C:\Program Files\PPLiveVA\NetTools.dll]  [, 1.0.0.2]
    [C:\Program Files\360safe\safemon\safemon.dll]  [360.CN, 5, 0, 0, 1021]
    [C:\Program Files\PPLiveVA\VAProxyD.dll]  [Synacast, 1.0.0.34]
    [C:\Program Files\PPLiveVA\FloatWin.dll]  [Synacast, 1.0.0.11]
    [C:\Program Files\PPLiveVA\TipsClient.dll]  [, 1, 0, 1, 5]
    [C:\Program Files\PPLiveVA\FlashWinCenter.dll]  [Synacast, 1.0.0.2]
    [C:\Program Files\PPLiveVA\peer.dll]  [Synacast, 0, 0, 5, 43]
[PID: 2584 / Administrator][C:\windows\system32\ctfmon.exe]  [(Verified) Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105)]
    [C:\Program Files\360safe\safemon\safemon.dll]  [360.CN, 5, 0, 0, 1021]
[PID: 2736 / Administrator][C:\Program Files\PPStream\ppsap.exe]  [PPStream Inc, 1, 0, 11, 226]
    [C:\Program Files\360safe\safemon\safemon.dll]  [360.CN, 5, 0, 0, 1021]
    [C:\Program Files\PPStream\vodnet.dll]  [PPStream Inc., 1, 0, 11, 234]
    [C:\Program Files\PPStream\vodres.dll]  [PPStream Inc., 1, 0, 11, 236]
    [C:\Program Files\PPStream\fds.dll]  [PPStream Inc., 1, 0, 0, 101]
    [C:\Program Files\PPStream\ppssg.dll]  [PPStream Inc., 1, 0, 11, 230]
[PID: 2812 / Administrator][C:\Documents and Settings\All Users\Application Data\PPLiveVA\Application\PPAP.exe]  [Synacast, 1, 0, 0, 6]
    [C:\Program Files\360safe\safemon\safemon.dll]  [360.CN, 5, 0, 0, 1021]
    [C:\Program Files\PPLiveVA\TipsClient.dll]  [, 1, 0, 1, 5]
[PID: 3720 / Administrator][C:\Program Files\PPLiveVA\PPLiveVAMonitor.exe]  [, 0, 1, 1, 2]
[PID: 3764 / Administrator][C:\windows\system32\conime.exe]  [(Verified) Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105)]
    [C:\Program Files\360safe\safemon\safemon.dll]  [360.CN, 5, 0, 0, 1021]
[PID: 2716 / Administrator][C:\windows\system32\wuauclt.exe]  [(Verified) Microsoft Corporation, 7.2.6001.788 (winmain_oob/wu_wsuswlc(wmbla).081016-1330)]
    [C:\Program Files\360safe\safemon\safemon.dll]  [360.CN, 5, 0, 0, 1021]
[PID: 3796 / Administrator][C:\Program Files\DigitalChina\DigitalChinaSupplicant\DigitalChinaSupplicant.exe]  [DigitalChina , 3, 5, 4, 304]
    [C:\windows\system32\packet.dll]  [CACE Technologies, 3, 1, 0, 27]
    [C:\windows\system32\WanPacket.dll]  [CACE Technologies, 3, 1, 0, 27]
    [C:\windows\system32\wpcap.dll]  [CACE Technologies, 3, 1, 0, 27]
    [C:\Program Files\DigitalChina\DigitalChinaSupplicant\MFC42.DLL]  [Microsoft Corporation, 6.00.8665.0]
    [C:\Program Files\360safe\safemon\safemon.dll]  [360.CN, 5, 0, 0, 1021]
    [C:\Program Files\DigitalChina\DigitalChinaSupplicant\amt.dll]  [N/A, ]
[PID: 3456 / SYSTEM][C:\windows\system32\wbem\wmiprvse.exe]  [(Verified) Microsoft Corporation, 5.1.2600.5755 (xpsp_sp3_qfe.090206-1316)]
[PID: 2268 / Administrator][C:\Program Files\PPLive\PPLive.exe]  [ , 2, 0, 0, 2]
    [C:\Program Files\PPLive\PPVod.Dll]  [PPLive, 1, 0, 9, 6]
    [C:\Program Files\PPLive\uilib.dll]  [Synacast, 1, 0, 0, 2]
    [C:\Program Files\PPLive\vodsp.dll]  [, 3, 3, 3, 5]
    [C:\Program Files\360safe\safemon\safemon.dll]  [360.CN, 5, 0, 0, 1021]
[PID: 3852 / Administrator][F:\新建文件夹\sreng2\SREngLdr.EXE]  [Smallfrogs Studio, 2.8.1.1279]
[PID: 828 / Administrator][F:\新建文件夹\sreng2\SRE9b4eb966.EXE]  [Smallfrogs Studio, 2.8.1.1279]
    [C:\Program Files\360safe\safemon\safemon.dll]  [360.CN, 5, 0, 0, 1021]
    [F:\新建文件夹\sreng2\Upload\3rdUpd.DLL]  [Smallfrogs Studio, 2, 1, 0, 15]

==================================
文件关联
.TXT  Error. [C:\windows\notepad.exe %1]
.EXE  OK. ["%1" %*]
.COM  OK. ["%1" %*]
.PIF  OK. ["%1" %*]
.REG  OK. [regedit.exe "%1"]
.BAT  OK. ["%1" %*]
.SCR  OK. ["%1" /S]
.CHM  Error. ["hh.exe" %1]
.HLP  OK. [%SystemRoot%\System32\winhlp32.exe %1]
.INI  Error. [C:\windows\System32\NOTEPAD.EXE %1]
.INF  OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.VBS  OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.JS   OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.LNK  OK. [{00021401-0000-0000-C000-000000000046}]

==================================
Winsock 提供者
N/A

==================================
Autorun.inf
N/A

==================================
HOSTS 文件
N/A

==================================
进程特权扫描
特殊特权被允许： SeLoadDriverPrivilege [PID = 740, C:\PROGRAM FILES\WIDCOMM\BLUETOOTH SOFTWARE\BIN\BTWDINS.EXE]
特殊特权被允许： SeLoadDriverPrivilege [PID = 3796, C:\PROGRAM FILES\DIGITALCHINA\DIGITALCHINASUPPLICANT\DIGITALCHINASUPPLICANT.EXE]
特殊特权被允许： SeLoadDriverPrivilege [PID = 3852, F:\新建文件夹\SRENG2\SRENGLDR.EXE]

==================================
计划任务
N/A

==================================
Windows 安全更新检查
 Microsoft .NET Framework 版本 1.1，简体中文版 
KB892130,  Windows 正版增值验证工具 (KB892130) 
KB925850,  Windows Media Player 11 
KB940157,  用于 Windows XP 的 Windows 搜索 4.0 (KB940157) 
KB902344,  启用了 WMDRM 的 Media Player 更新程序 (KB902344) 
KB943729,  用于 Windows XP 的组策略首选项客户端扩展 (KB943729) 
KB905474,  Windows Genuine Advantage 通知 (KB905474) 
KB909520,  Microsoft 基本智能卡加密服务提供程序包： x86 (KB909520) 
KB951847,  Microsoft .NET Framework 3.5 Service Pack 1 和 .NET Framework 3.5 Family Update (KB951847) x86 
KB972260,  用于 Windows XP 的 Internet Explorer 7 累积安全更新程序 (KB972260) MS09-034
KB971657,  Windows XP 安全更新程序 (KB971657) MS09-041
KB944036,  用于 Windows XP 的 Internet Explorer 8 
KB890830,  Windows 恶意软件删除工具 - 2009 年 9 月 (KB890830) 
KB931125,  根证书更新 [2009 年 9 月] (KB931125) 

==================================
API HOOK
N/A

==================================
隐藏进程
N/A

==================================


[/CODE]